Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB61AB94F69411EFA749D255762E951A.roa
File: EB61AB94F69411EFA749D255762E951A.roa (raw, json)
Hash identifier: M0SN+XdxPm8dWq3Vy3PqrQsffVoA+mmkWB5d+VdLK9w=
Subject key identifier: 6F:D0:31:12:B9:C4:F8:3C:ED:29:EB:7D:90:AB:37:14:96:0C:C5:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016E25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB61AB94F69411EFA749D255762E951A.roa
Signing time: Sat 01 Mar 2025 12:01:34 +0000
ROA not before: Sat 01 Mar 2025 12:01:30 +0000
ROA not after: Mon 31 Mar 2025 12:01:30 +0000
asID: 202656
IP address blocks: 154.221.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93733 (0x16e25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 1 12:01:30 2025 GMT
Not After : Mar 31 12:01:30 2025 GMT
Subject: CN=67c2f71e-d02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:6b:13:a8:46:73:6b:43:c5:51:94:47:46:
c5:cc:9b:bb:e9:e5:b7:98:e0:c7:9b:30:b9:36:41:
dd:da:92:87:39:01:af:25:e8:8b:9c:cd:7e:ce:c2:
4f:f2:5c:1f:4b:50:02:92:ba:ff:8f:d9:13:f3:88:
bb:b0:55:32:cc:7d:b8:d7:3e:1d:d5:54:91:2c:83:
7a:66:8c:8b:59:3b:83:26:14:fc:bb:2b:ef:ef:cf:
43:b6:95:a3:38:24:9b:7e:dc:19:82:3a:8d:5a:d9:
93:11:8f:35:83:09:37:9f:e4:fa:5e:a6:d8:41:3a:
0f:95:f6:74:dd:f7:b4:59:2d:ca:ee:b8:74:f4:b2:
63:27:bb:cf:21:01:16:58:71:01:ca:ba:91:e3:86:
6c:5f:70:9b:70:ab:d4:95:ae:45:28:93:d7:af:0f:
4e:9a:3e:96:5d:68:84:e7:68:51:3c:9b:f7:c0:14:
5c:b2:aa:c7:44:46:6e:30:ec:67:9f:a4:4f:1a:fc:
60:b2:f9:0b:1e:19:a6:f0:f7:d5:3b:ad:c7:87:35:
05:ab:ab:be:6a:a9:30:89:04:fe:89:62:d6:63:60:
18:5e:9a:8f:91:75:1a:cf:95:a7:de:44:b5:30:2b:
1a:3b:15:6a:91:c3:50:67:ba:6b:7c:74:ff:6f:f3:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D0:31:12:B9:C4:F8:3C:ED:29:EB:7D:90:AB:37:14:96:0C:C5:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB61AB94F69411EFA749D255762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.61.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d3:9a:91:2b:4e:f8:98:d4:29:bd:00:1c:a4:d8:e7:02:83:
81:79:3d:e4:fe:16:25:46:88:e0:d4:b4:9b:55:c8:88:e4:72:
9b:57:0d:71:82:82:34:13:76:44:c0:7f:dc:8c:3f:49:03:1a:
9d:fa:cf:58:fa:6b:80:05:ac:9a:a3:a1:f8:e9:7e:d2:a2:46:
7a:89:91:ad:13:c5:8f:3d:16:3e:87:aa:ca:f5:d8:1b:fc:7b:
a9:e2:d6:d9:29:0d:50:72:d9:73:7b:2d:1f:f0:ec:db:92:5d:
7a:b3:e9:64:cf:76:44:ea:ae:e6:cd:a1:4f:aa:66:e6:78:f9:
dd:ca:22:4f:48:fe:3c:bd:2e:e4:db:d1:22:ac:10:57:9f:d3:
57:db:1f:ec:9f:6a:de:65:b1:8f:18:ce:7f:51:94:ab:b0:08:
dc:00:9e:d5:02:c5:a7:8c:21:02:65:e9:4e:dc:20:b8:83:66:
76:a4:6b:d0:1b:01:01:2f:60:ac:6b:87:8a:07:ff:c5:af:54:
eb:bf:56:c9:c9:31:ed:31:94:e1:2c:fc:1a:58:51:bf:1f:9a:
54:ff:cd:39:03:5b:f7:7b:a4:68:8f:72:a8:86:df:50:a0:03:
81:90:bb:e1:32:73:21:86:94:81:06:71:a9:b3:02:e7:81:fc:
5c:4d:38:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW4lMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTIwMTMwWhcNMjUwMzMxMTIwMTMwWjAYMRYw
FAYDVQQDEw02N2MyZjcxZS1kMDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArpxrE6hGc2tDxVGUR0bFzJu76eW3mODHmzC5NkHd2pKHOQGvJeiLnM1+
zsJP8lwfS1ACkrr/j9kT84i7sFUyzH241z4d1VSRLIN6ZoyLWTuDJhT8uyvv789D
tpWjOCSbftwZgjqNWtmTEY81gwk3n+T6XqbYQToPlfZ03fe0WS3K7rh09LJjJ7vP
IQEWWHEByrqR44ZsX3CbcKvUla5FKJPXrw9Omj6WXWiE52hRPJv3wBRcsqrHREZu
MOxnn6RPGvxgsvkLHhmm8PfVO63HhzUFq6u+aqkwiQT+iWLWY2AYXpqPkXUaz5Wn
3kS1MCsaOxVqkcNQZ7prfHT/b/OnGQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFG/Q
MRK5xPg87SnrfZCrNxSWDMVFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQjYxQUI5NEY2OTQxMUVGQTc0OUQyNTU3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt09MA0GCSqGSIb3DQEB
CwUAA4IBAQAz05qRK074mNQpvQAcpNjnAoOBeT3k/hYlRojg1LSbVciI5HKbVw1x
goI0E3ZEwH/cjD9JAxqd+s9Y+muABayao6H46X7SokZ6iZGtE8WPPRY+h6rK9dgb
/Hup4tbZKQ1Qctlzey0f8Ozbkl16s+lkz3ZE6q7mzaFPqmbmePndyiJPSP48vS7k
29EirBBXn9NX2x/sn2reZbGPGM5/UZSrsAjcAJ7VAsWnjCECZelO3CC4g2Z2pGvQ
GwEBL2Csa4eKB//Fr1Trv1bJyTHtMZThLPwaWFG/H5pU/805A1v3e6Roj3Koht9Q
oAOBkLvhMnMhhpSBBnGpswLngfxcTThk
-----END CERTIFICATE-----
Generated at Fri May 9 06:09:32 2025 by rpki-client